Google Chrome
Google Chrome Security Releases - July 2026
google-chrome-2026-07 Jul 1, 2026 Source: Vendor
Google Chrome security advisories for July 2026: 374 CVEs, 24 credited researchers.
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
376 lines
Showing 201–250 of 376 matching , page 5 of 8 , clear filters
CVE-2026-17845
BR2026-0000-034904
CSS
unclaimed
Medium — Inappropriate implementation in CSS (reported 2026-05-30)
Credited as Google
CVE-2026-17846
BR2026-0000-034905
Media
unclaimed
Medium — Inappropriate implementation in Media (reported 2026-05-30)
Credited as Google
CVE-2026-17847
BR2026-0000-034906
ANGLE
unclaimed
Medium — Insufficient validation of untrusted input in ANGLE (reported 2026-05-30)
Credited as Google
CVE-2026-17848
BR2026-0000-034907
Codecs
unclaimed
Medium — Insufficient validation of untrusted input in Codecs (reported 2026-05-31)
Credited as Ameen Basha M K
CVE-2026-17849
BR2026-0000-034908
Chrome for iOS
unclaimed
Medium — Inappropriate implementation in Chrome for iOS (reported 2026-06-01)
Credited as Google
CVE-2026-17850
BR2026-0000-034909
Permissions
unclaimed
Medium — Inappropriate implementation in Permissions (reported 2026-06-02)
Credited as Tech Division (@taiphung) - Mobifone Digital Payment
CVE-2026-17851
BR2026-0000-034910
Autofill
unclaimed
Medium — Side-channel information leakage in Autofill (reported 2026-06-02)
Credited as Google
CVE-2026-17852
BR2026-0000-034911
Media Router
unclaimed
Medium — Inappropriate implementation in Media Router (reported 2026-06-03)
Credited as Google
CVE-2026-17853
BR2026-0000-034912
DevTools
unclaimed
Medium — Inappropriate implementation in DevTools (reported 2026-06-03)
Credited as Orange Tsai (@orange_8361) of DEVCORE Research Team
CVE-2026-17854
BR2026-0000-034913
WebMCP
unclaimed
Medium — Insufficient policy enforcement in WebMCP (reported 2026-06-03)
Credited as Google
CVE-2026-17855
BR2026-0000-034914
DevTools
unclaimed
Medium — Race in DevTools (reported 2026-06-04)
Credited as Google
CVE-2026-17856
BR2026-0000-034915
Network
unclaimed
Medium — Inappropriate implementation in Network (reported 2026-06-04)
Credited as Google
CVE-2026-17857
BR2026-0000-034916
Network
unclaimed
Medium — Inappropriate implementation in Network (reported 2026-06-05)
Credited as Google
CVE-2026-17858
BR2026-0000-034917
WebNN
unclaimed
Medium — Uninitialized Use in WebNN (reported 2026-06-05)
Credited as Google
CVE-2026-17859
BR2026-0000-034918
Favicons
unclaimed
Medium — Side-channel information leakage in Favicons (reported 2026-06-05)
Credited as Google
CVE-2026-17860
BR2026-0000-034919
Mobile
unclaimed
Medium — Insufficient validation of untrusted input in Mobile (reported 2026-06-05)
Credited as Google
CVE-2026-17861
BR2026-0000-034920
Updater
unclaimed
Medium — Insufficient validation of untrusted input in Updater (reported 2026-06-05)
Credited as Google
CVE-2026-17862
BR2026-0000-034921
Tracing
unclaimed
Medium — Use after free in Tracing (reported 2026-06-05)
Credited as Google
CVE-2026-17863
BR2026-0000-034922
Browser
unclaimed
Medium — Inappropriate implementation in Browser (reported 2026-06-05)
Credited as Google
CVE-2026-17864
BR2026-0000-034923
Updater
unclaimed
Medium — Inappropriate implementation in Updater (reported 2026-06-05)
Credited as Google
CVE-2026-17865
BR2026-0000-034924
Crypto
unclaimed
Medium — Inappropriate implementation in Crypto (reported 2026-06-05)
Credited as Google
CVE-2026-17866
BR2026-0000-034925
Tab
unclaimed
Medium — Type Confusion in Tab (reported 2026-06-05)
Credited as Google
CVE-2026-17867
BR2026-0000-034926
Dawn
unclaimed
Medium — Insufficient validation of untrusted input in Dawn (reported 2026-06-05)
Credited as Google
CVE-2026-17868
BR2026-0000-034927
USB
unclaimed
Medium — Insufficient policy enforcement in USB (reported 2026-06-06)
Credited as Ariel Simon
CVE-2026-17869
BR2026-0000-034928
WebXR
unclaimed
Medium — Out of bounds read in WebXR (reported 2026-06-09)
Credited as Google
CVE-2026-17870
BR2026-0000-034929
Cast
unclaimed
Medium — Insufficient validation of untrusted input in Cast (reported 2026-06-09)
Credited as Google
CVE-2026-17871
BR2026-0000-034930
Passwords
unclaimed
Medium — Inappropriate implementation in Passwords (reported 2026-06-09)
Credited as Google
CVE-2026-17872
BR2026-0000-034931
WebAppInstalls
unclaimed
Medium — Cryptographic Flaw in WebAppInstalls (reported 2026-06-09)
Credited as Google
CVE-2026-17873
BR2026-0000-034932
Chrome for iOS
unclaimed
Medium — Insufficient policy enforcement in Chrome for iOS (reported 2026-06-10)
Credited as Google
CVE-2026-17874
BR2026-0000-034933
Chrome for iOS
unclaimed
Medium — Inappropriate implementation in Chrome for iOS (reported 2026-06-10)
Credited as Google
CVE-2026-17875
BR2026-0000-034934
PDFium
unclaimed
Medium — Use after free in PDFium (reported 2026-06-10)
Credited as Google
CVE-2026-17876
BR2026-0000-034935
Payments
unclaimed
Medium — Inappropriate implementation in Payments (reported 2026-06-10)
Credited as Google
CVE-2026-17877
BR2026-0000-034936
Chromoting
unclaimed
Medium — Inappropriate implementation in Chromoting (reported 2026-06-10)
Credited as Google
CVE-2026-17878
BR2026-0000-034937
CSS
unclaimed
Medium — Inappropriate implementation in CSS (reported 2026-06-11)
Credited as Google
CVE-2026-17879
BR2026-0000-034938
Autofill
unclaimed
Medium — Inappropriate implementation in Autofill (reported 2026-06-11)
Credited as Google
CVE-2026-17880
BR2026-0000-034939
Autofill
unclaimed
Medium — Inappropriate implementation in Autofill (reported 2026-06-12)
Credited as Google
CVE-2026-17881
BR2026-0000-034940
WebXR
unclaimed
Medium — Use after free in WebXR (reported 2026-06-13)
Credited as Google
CVE-2026-17882
BR2026-0000-034941
Extensions
unclaimed
Medium — Policy bypass in Extensions (reported 2026-06-13)
Credited as Google
CVE-2026-17883
BR2026-0000-034942
Headless
unclaimed
Medium — Inappropriate implementation in Headless (reported 2026-06-13)
Credited as Google
CVE-2026-17884
BR2026-0000-034943
WebRTC
unclaimed
Medium — Object lifecycle issue in WebRTC (reported 2026-06-13)
Credited as Google
CVE-2026-17885
BR2026-0000-034944
Paint
unclaimed
Medium — Inappropriate implementation in Paint (reported 2026-06-13)
Credited as Google
CVE-2026-17886
BR2026-0000-034945
Enterprise
unclaimed
Medium — Use after free in Enterprise (reported 2026-06-14)
Credited as Google
CVE-2026-17887
BR2026-0000-034946
TabStrip
unclaimed
Medium — Use after free in TabStrip (reported 2026-06-14)
Credited as Google
CVE-2026-17888
BR2026-0000-034947
WebUI
unclaimed
Medium — Insufficient validation of untrusted input in WebUI (reported 2026-06-14)
Credited as Google
CVE-2026-17889
BR2026-0000-034948
WebXR
unclaimed
Medium — Uninitialized Use in WebXR (reported 2026-06-14)
Credited as Google
CVE-2026-17890
BR2026-0000-034949
DevTools
unclaimed
Medium — Insufficient validation of untrusted input in DevTools (reported 2026-06-15)
Credited as Google
CVE-2026-17891
BR2026-0000-034950
ANGLE
unclaimed
Medium — Use after free in ANGLE (reported 2026-06-16)
Credited as Google
CVE-2026-17892
BR2026-0000-034951
WebXR
unclaimed
Medium — Inappropriate implementation in WebXR (reported 2026-06-17)
Credited as Google
CVE-2026-17893
BR2026-0000-034952
Updater
unclaimed
Medium — Insufficient validation of untrusted input in Updater (reported 2026-06-17)
Credited as Google
CVE-2026-17894
BR2026-0000-034953
Views
unclaimed
Medium — Use after free in Views (reported 2026-06-17)
Credited as Google